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Amendments to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims : 

1, (currently amended) A method allowing for dynamic detection of network de\'ices located 
along a communications path that include compatible transformation tunnel capabilities, at 
least one of the network devices operative to recognize probe requests and transmit a probe 
response including transformation tunnel capabilities in response to the probe request, the 
method comprising the steps of: 

detecting a first data flow to a destination host; 

probing the path to the destination host to idgtfily discover the n etv/ork add ress of at 
least one of the network devices ha\ing compatible transformation tunnel capabilities; and, 

^ ^ net?<.vork address of a network device is idendfiod discovered in die probing step, 
transforming subsequent data flows, aadfer subsequent packets in the first data flow, to the 
destination host from a first state to a second state and tunneling the data flow s, or the 
subsequent packets in t he first data flow, to the identified network device. 

2. (original) The method of claim 1 wherein the probing step comprises the steps of 

transmitting a probe request to the destination host; and 

receiving a probe response from a neuvork device in the path to the destination host. 

3. (currently amended) The method of claim 1 further comprising the step of 

transforming, at the identified discovered network device, the data flows from the second 
state to a third state; and 

transmitting the data flows to the destination hose 

4. (original) The method of claim 3 wherein the diird state is -subslantially the same as the first 
state. 
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5. (original) The mediod of claim Iwhcrdn the probing seep is conditioned on dececti^^ 
threshold level of activity associated with the destination host. 

6. (original) The method of claim 5 wherein the threshold level of activity comprises a minimum 
number of data flows to the destination host over an analysis interval 

7. (original) Themechodof claim 5 wherein the threshold level of activity comprises a minimum 
number of bytes transmitted to the destination host over an analysis interval. 

8. (origiaal) Themethodof claim 5 wherein the threshold level of activity comprises a minimum 
average data flow rate associated with the destination host over an analysis interval. 

9. (currently amended) The method of claim 1 further comprising the step of 

selecting the network device furthest along the path to the destination host, if a plurality 
of network devices are identified discovered in the probing step. 

10. (currently amended) The method of claim 2 further comprising the step of 

selecting the network device furthest along the path to the destination host, if a plurality 
of neuvork devices are i dentified discovered in the probing step. 

11. (original) Themethodofdaim 10 wherein the responding network devices transmit probe 
responses ii^ response to probe requests, wherein the probe responses are TCPAP packets 
including a predefined Time-To-Live value; and the selecting step is determined on the basis of 
the Time-To'Live values of the probe responses transmitted by the plurality of network devices. 

12. (currently amended) The method of claim 1 wherein the transforming step comprises 
compressing data associated with the data flows in a format the identified discovered network 
device can decompress. 
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13. (origina]) The method of claim 1 wherein the transformmg step comprises caching data 
associated with the data flows. 

14. (currently amended) The method of claim 1 wherein the transforming step comprises 
encrypting data associated with the data flows in a format the identified discovered network 
device can decrypt. 

15. (currendy amended) A method allowing for optimization of commimications paths 
associated v^th a computer network by dynamic detection of network devices located along a 
communicatioas path that include compatible transformation tunnel capabilities, at least one of 
the network de^'ices operative to recognize probe requests and transmit a probe response 
including transformation tunnel capabilities in response to the probe request^ the method 
comprising the steps of: 

detecting a data flow to a destination host; 

if the path to the destination host has not been probed, then: 

probing the path to the destination host to identify discover the network address 
ofa network device dcvicQa haxlng compatible transformation tunnel capabilities; and, 

associating a network device identified discovered in the probing step with the 
destination host; 
and. 

if a network de\'ice is associated with a destination host, transforming data flows to the 
destination host ftom a first state to a second state and tunneling the data flows to the 
associated network device. 

16. (original) The method of claim 15 wherein the probing step comprises the steps of 

transmitting a probe request to the destination host; and 

receiving a probe response from a network device in the path to the destination host. 

17. (currently amended) Themethodof claim 15 further comprising the step of 
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transforming, at the idontifiod discovered network device, the data flows from the second 
state to a third state; and 

transmitting the data flows to the destination host. 

18. (original) The method of claim 17 wherein the third state is substantially the sarae as the 
first state. 

19. (original) The method of claim 15 wherein the probing step is conditioned on detection of a 
threshold level of acti\lcy associated with the destination host. 

20. (currently amended) The method of claim 15 further comprising the step of 

selecting the network device furthest along the path to the destination host, if a plurality 
of network devices are idantificd discovered in the probing step. 

21. (original) The method of claim 20 wherein the responding network devices transmit probe 
responses in response to probe requests, wherein the probe responses are TCP/IP packets 
including a predefined Time-To-Liye value; and the selecting step is determined on the basis of 
the Time-To-Live values of the probe responses transmitted by the plurality of network devices. 

22. (currently amended) An apparatus allovving for automatic detection of network devices 
located in a conmiunications path that include compatible transformation tunnel capabilities, 
comprising: 

a packet processor operably connected to a computer network to monitor data flows 
traversing communication paths associated with the computer network to respective 
destination hosts; 

a transformation tunnel mechanism including transformation tunnel capabilities 
operative to transform data flows from a first state to a second state; 

wherein the transformation turmel mechanism is further operative to establish a 
tunnel \^dth a network device having compatible transformation tunnel capabilities located in a 
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coimnvinications path associated with the computer network; 

a probe module operative to probe for network devices along communications paths to 
destination hosts that include compatible transformation tumel capabilities in response to data 
flows detected by the packet processo r, wherein the probe moduleis further operative to obtain 
the network ad dress of a network device having compatible transfoimatjon tunnel capabilities - 

wherein the probe module is operative to associate destination hosts with 
respective network devices along communication paths thereto having compatible 
transformation tunnel capabilities; 

wherein the packet processor is further operative to channel data flows to the 
transformation tunnel mechanism, wherein the channeled data flows are bound for destination 
hosts associated with network devices identified by the probe module. 

23. (original) The apparatus of claim 22 wherein the probe module is operative co transmit 
probe requests along communication paths to destination hosts in response to new data flows, 
and 

wherein the probe request causes compatible network devices along the path to 
communicate transformation tunnel capabiUdes to the apparatus. 

24. (original) The apparatus of claini 22 wherein the packet processor is operative to identify 
new destination hosts associated with data flows and store the computer network address of the 
destination host in a database. 

25. (original) The apparatus of claim 24 wherein the probe module stores network devices 
ha\ing compatible transformation turmel capabilities in the database in association with 
corresponding destination hosts. 

26. (original) The apparatus of claim 22 further comprising a trafftc class engine operative to 
classify data flows traversing the packet processor into one of a plurality of trafEc types; 

wherein traffic types associated with data flows are operative to condition the operation 
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of the probe module with respect to the destination hosts associated with such data flows. 

27. (original) The apparatus of claim 22 further comprising a traffic class engine operative to 
classif\' data flows traversing the packet processor into one of a plurality of traffic types; 

wherein the traffic types associated with the data flows are operative to condition the 
channehng of such data flows to the transformation tunnel mechanism. 

28. (original) The apparatus of claim 27 wherein traffic types associated with data flows are 
hjrther operative to condition the operation of the probe module with respect to the destination 
hosts associated with such data flows. 

29. (currently amended) Asystemallowingford>'namicdetectionof network devices that 
include compatible transformation tunnel capabihties, the network devices located along a 
communications path between a first host node and a second host node, comprising 

a tunnel probing device operably connected to a computer network; wherein the tunnel 
probing device comprises: 

a packet processor operative to monitor data flows traversing conmiunication paths 
associated with the computer network to respective destination hosts; 

a transformation tunnel mechanism including transformation tunnel capabilities 
operative to transform data flows from a first state to a second state; 

wherein the transformation tunnel mechanism is further operative to establish a 
tunnel with a network device having compatible tt ansformation tunnel capabilities located in a 
communications path associated with the computer network; 

a probe module operative to probe for network devices along communications paths to 
destination hosts that include compatible transformation tunnel capabilities in response to data 
flows detected by the packet processo r, wherein the probe module is further operative to obtain 
the network address of a network device having compatible transformation tunnel capabilities: 

wherein the probe module is operative to associate destination hosts with 
respective network devices along communication paths thereto having compatible 
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transformation runnel capabilities; 

wherein the packet processor is further operative co channel data flows co the 
nransformacion tunnel mechanism, wherein the channeled data flows are bound for destination 
hosts associated with network devices identified by the probe module; and. 

at least one network device operably connected to the computer network, wherein the 
network de\ace comprises a transformation tunnel mechanism including at least one 
rransformarion tunnel capability; wherein the network device is operative to communicate 
transformation tunnel capabilities to the tunnel probing device in response to probe requests. 
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